KYC Scam: A retired school teacher in Delhi became the latest victim of a dangerous online scam that wiped out her life savings. Renu Vishwanath, 59, lost Rs 47 lakh after cyber criminals tricked her through a fake KYC (Know Your Customer) verification process that started with a simple WhatsApp message.
The fraud began when Renu received a WhatsApp message claiming her bank KYC needed verification. Soon after, a scammer called her pretending to be a bank employee. “The caller sounded very professional and knew banking terms,” Renu recalled. “He said my account would be frozen if I didn’t complete the KYC immediately.”
April 2025 Financial Changes: Updates on Income Tax, Credit Cards, Mutual Funds & More
The fraudster then sent a second WhatsApp message containing a link to download an APK file (Android app file). When Renu installed it, the malware hidden inside gave criminals complete access to her phone and bank accounts. Within hours, her entire savings disappeared.
Cyber security experts warn that such scams are becoming increasingly common. “No real bank will ever ask customers to verify KYC through WhatsApp or download external APK files,” said Alay Razvi, a legal expert at Accord Juris. “Scammers create fake urgency to trick people. Always remember – real KYC updates only happen through official bank apps or websites.”
Lawyer Meghna Mishra explained how the criminals operated: “The fraudsters first gain trust by pretending to be bank staff, then use technical terms to confuse victims into installing malware.”
“To stay unharmed, people must exercise caution, be a little more tech-friendly and avoid downloading unknown APK files sent via WhatsApp, email, or SMS. Banks do not request KYC verification through WhatsApp, and any such message should be treated as a red flag. Additionally, unsolicited calls from individuals claiming to be customer service representatives should be ignored, and any KYC updates should only be completed through official bank channels only. Another common scam tactic involves sending links disguised as wedding invitations, courier tracking messages, or urgent banking alerts—these should never be clicked. If anyone suspects any fraudulent activity, they must report it immediately on the National Cybercrime Reporting Portal (www.cybercrime.gov.in) or by calling 1930,” said Kartikay Trivedi, associate, SKV Law Offices, reported by Business Standard.
“While caller tune advisories have been used to warn the public of these fraudulent activities, they have turned out to be in vain. The government must expand its awareness campaigns through Public Service Announcements (PSAs), awareness booths and workshops, that specifically address emerging scam tactics, such as fake KYC requests and malware-laden links. Awareness through television, social media, and digital platforms is essential to ensure people recognise and avoid such threats,” Trivedi said.
Save Tax with These Two Section 80C Investments in Your Child’s Name Before March 31, 2025
This incident highlights how even educated, tech-savvy people can fall prey to sophisticated online scams. According to recent RBI data, India reported over 13,000 banking fraud cases last year, with many involving similar KYC scams.
“People must understand that banks never call customers for sensitive operations,” emphasized a senior banking official. “When in doubt, always visit your branch directly rather than trusting phone calls or messages.”
As digital banking grows, experts urge everyone to learn basic cyber safety measures to protect their hard-earned money from such devastating scams.
This website uses cookies.